# cve.now: MZ Automation

The newest entries naming MZ Automation as an affected vendor (up to 200), of 35 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-68906](https://cve.now/CVE-2026-68906.md): libIEC61850: Infinite loop and out-of-bounds read in ACSE parseUserInformation when parsing a malformed AARE PDU (CVSS 8.7)
- [CVE-2026-68907](https://cve.now/CVE-2026-68907.md): libIEC61850: Server-side out-of-bounds stack read in association-specific dynamic dataset creation due to reversed StringUtils\_copyStringToBuffer arguments (CVSS 8.2)
- [CVE-2026-68908](https://cve.now/CVE-2026-68908.md): libIEC61850: Oversized RptID can trigger invalid free of a stack-backed visible string in the report send path (CVSS 5.3)
- [CVE-2026-57446](https://cve.now/CVE-2026-57446.md): libIEC61850: Server-side double free in MMS ObtainFile task reuse due to stale FILE\* handle (CVSS 5.3)
- [CVE-2026-48741](https://cve.now/CVE-2026-48741.md): libIEC61850: Remote NULL dereference in MMS Read alternate-access sub-array path leads to server-side DoS (CVSS 7.5)
- [CVE-2026-48503](https://cve.now/CVE-2026-48503.md): libIEC61850: Remote information disclosure in MMS file service via out-of-range initialPosition in fileOpen followed by fileRead (CVSS 7.5)
- [CVE-2026-19259](https://cve.now/CVE-2026-19259.md): MZ Automation libiec61850 MMS Protocol Workflow iec61850\_common.c MmsMapping\_varAccessSpecToObjectReference heap-based overflow (CVSS 4.8)
- [CVE-2026-19206](https://cve.now/CVE-2026-19206.md): MZ Automation libiec61850 ASDU Element sv\_subscriber.c SVReceiver\_stopThreadless heap-based overflow (CVSS 4.8)
- [CVE-2026-19108](https://cve.now/CVE-2026-19108.md): MZ Automation libiec61850 URCB Revalidation reporting.c deleteDataSetValuesShadowBuffer use after free (CVSS 4.8)
- [CVE-2026-18583](https://cve.now/CVE-2026-18583.md): mz-automation libiec61850 MMS Request mms\_mapping.c checkDataSetAccess out-of-bounds (CVSS 6.9)
- [CVE-2026-18582](https://cve.now/CVE-2026-18582.md): mz-automation libiec61850 Report Sending Path reporting.c Reporting\_RCBWriteAccessHandler free of memory not on the heap (CVSS 6.9)
- [CVE-2026-61893](https://cve.now/CVE-2026-61893.md): MZ Automation lib60870 Out-of-bounds Read (CVSS 6.5)
- [CVE-2026-63033](https://cve.now/CVE-2026-63033.md): MZ Automation lib60870 Out-of-bounds Read (CVSS 6.5)
- [CVE-2026-66720](https://cve.now/CVE-2026-66720.md): MZ Automation libiec61850 Out-of-bounds Read (CVSS 6.5)
- [CVE-2026-66369](https://cve.now/CVE-2026-66369.md): MZ Automation libiec61850 Out-of-bounds Read (CVSS 6.5)
- [CVE-2026-63550](https://cve.now/CVE-2026-63550.md): MZ Automation libiec61850 Out-of-bounds Read (CVSS 6.5)
- [CVE-2026-65421](https://cve.now/CVE-2026-65421.md): MZ Automation libiec61850 Out-of-bounds Read (CVSS 6.5)
- [CVE-2026-66364](https://cve.now/CVE-2026-66364.md): MZ Automation libiec61850 Out-of-bounds Read (CVSS 6.5)
- [CVE-2026-66349](https://cve.now/CVE-2026-66349.md): MZ Automation libiec61850 Out-of-bounds Read (CVSS 6.5)
- [CVE-2026-56758](https://cve.now/CVE-2026-56758.md): MZ Automation libiec61850 Out-of-bounds Read (CVSS 6.5)
- [CVE-2026-66360](https://cve.now/CVE-2026-66360.md): MZ Automation libiec61850 Out-of-bounds Read (CVSS 7.5)
- [CVE-2026-16002](https://cve.now/CVE-2026-16002.md): Out-of-bounds Read in MZ Automation lib60870 (CVSS 8.2)
- [CVE-2026-50032](https://cve.now/CVE-2026-50032.md): NULL Pointer Dereference in MZ Automation libIEC61850 (CVSS 7.5)
- [CVE-2026-50103](https://cve.now/CVE-2026-50103.md): Improper Handling of Syntactically Invalid Structure in MZ Automation libIEC61850 (CVSS 6.5)
- [CVE-2026-49035](https://cve.now/CVE-2026-49035.md): Stack-based Buffer Overflow in MZ Automation libIEC61850 (CVSS 8.1)
- [CVE-2026-50039](https://cve.now/CVE-2026-50039.md): Stack-based Buffer Overflow in MZ Automation libIEC61850 (CVSS 7.5)
- [CVE-2022-3976](https://cve.now/CVE-2022-3976.md): MZ Automation libiec61850 MMS File Services mms\_client\_files.c path traversal (CVSS 5.5)
- [CVE-2022-2970](https://cve.now/CVE-2022-2970.md): MZ Automation libIEC61850 Stack-Based Buffer Overflow (CVSS 10.0)
- [CVE-2022-2972](https://cve.now/CVE-2022-2972.md): MZ Automation libIEC61850 Stack-Based Buffer Overflow (CVSS 10.0)
- [CVE-2022-2971](https://cve.now/CVE-2022-2971.md): MZ Automation libIEC61850 Access of Resource Using Incompatible Type ('Type Confusion') (CVSS 8.6)
- [CVE-2022-2973](https://cve.now/CVE-2022-2973.md): MZ Automation libIEC61850 NULL Pointer Dereference (CVSS 8.6)
- [CVE-2022-21159](https://cve.now/CVE-2022-21159.md): A denial of service vulnerability exists in the parseNormalModeParameters functionality of MZ Automation GmbH libiec61850 1.5.0. (CVSS 7.5)
- [CVE-2022-1302](https://cve.now/CVE-2022-1302.md): Malformed Goose Message in LibIEC61850 may result in a denial of service (CVSS 7.5)
- [CVE-2020-15158](https://cve.now/CVE-2020-15158.md): Heap buffer overflow in libIEC61850 (CVSS 7.7)
- [CVE-2019-1010300](https://cve.now/CVE-2019-1010300.md): mz-automation libiec61850 1.3.2 1.3.1 1.3.0 is affected by: Buffer Overflow. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/mz-automation
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.